Authored by chunhua.zhang

add security config

... ... @@ -38,6 +38,7 @@ ops.kafka IN A 10.66.105.56
ops.ckafka IN A 10.66.105.56
rec.ckafka IN A 10.66.105.31
vault IN A 10.66.107.2
security.config IN A 10.66.70.70
;database
... ...
#user nobody;
worker_processes 1;
error_log /var/log/nginx/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
#tcp_nopush on;
#keepalive_timeout 0;
keepalive_timeout 65;
#lua
lua_package_path "/usr/local/openresty/nginx/conf/?.lua;;";
init_worker_by_lua_block {
sec = require("sec")
sec:init()
}
#gzip on;
server {
listen 80;
server_name security.config.yohoops.org;
#charset koi8-r;
#access_log logs/host.access.log main;
location /config {
content_by_lua_block {
sec = require("sec")
sec:get_config()
}
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
}
... ...
{
"alipay":[
{
"name": "MKT",
"public_Key": "xxxxxsss",
"private_key": "xxxxx"
}
]
}
\ No newline at end of file
... ...
local modname= ...
local M={}
_G[modname]=M
package.loaded[modname]=M
local cjson=require "cjson"
local config = {}
-- load config files from local
local function load_config()
local myTable = {}
local file = io.open( "/usr/local/openresty/nginx/conf/sec.config.json", "r" )
if file then
--print("trying to read ", filename)
-- read all contents of file into a string
local contents = file:read( "*a" )
myTable = cjson.decode(contents);
io.close( file )
--print("Loaded file")
return myTable
else
ngx.log(ngx.ERR, "file is not found. ")
return nil
end
end
--- called by init_worker_by_lua_file
function M:init()
config = load_config()
end
-- get all config --------
function M:get_config()
ngx.header["Content-type"]="application/json;charset=utf-8"
if next(config) == nil then
ngx.log(ngx.ERR, "config not found. ")
ngx.exit(ngx.HTTP_NOT_FOUND)
else
local body = cjson.encode(config)
ngx.say(body)
ngx.exit(ngx.HTTP_OK)
end
end
... ...